This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
File:                     JtUcwUoj0KiCO18cogDnCGrJqWk.cer (raw, json)
Hash identifier:          4sFrsqsVGfQdCVxY+aiEgPJXYg1dqhyrxLzH5G7b3J0=
Subject key identifier:   26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0285ED
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 13:53:54 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 141444
                          IP: 103.159.138.0/23
                          IP: 2406:d340::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165357 (0x285ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 13 13:53:54 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:1f:bb:7e:82:dd:f0:b9:c7:6f:1b:c7:62:
                    6d:ae:ee:9b:f6:95:49:a6:02:82:6b:16:42:3a:80:
                    24:bf:6e:23:c0:ad:b4:8f:98:d2:b6:87:ff:8c:66:
                    46:91:f5:82:62:f0:92:76:3d:d7:18:25:6d:3a:90:
                    0c:42:be:86:28:16:c6:6a:3f:c5:1d:88:c3:d2:cf:
                    27:cd:e7:2c:34:f4:10:2e:e2:24:32:27:83:f8:80:
                    38:be:42:65:00:e5:43:ef:2f:9b:09:54:ea:73:a9:
                    41:fd:1c:7d:28:67:87:65:0d:93:75:6c:8a:71:6b:
                    f4:f8:03:7e:ec:01:c5:60:ca:31:ac:97:e6:4b:64:
                    3a:0a:36:c7:92:04:8b:b3:ce:80:5f:e9:ca:91:31:
                    24:b1:12:15:7d:46:a9:85:40:ce:29:68:61:66:76:
                    48:05:23:9c:62:35:33:70:d2:ef:0a:24:67:0e:18:
                    97:56:cc:00:59:c9:3f:79:7b:e6:1d:f8:df:38:5f:
                    e8:f2:eb:ce:14:79:63:8c:b7:c6:da:45:b4:76:3c:
                    78:a6:08:a9:64:95:85:3b:5f:04:15:ee:ff:b5:e3:
                    5c:76:2e:8e:ce:5b:6b:0e:cb:87:bf:1b:01:30:ab:
                    c0:96:6f:64:21:f0:d6:20:70:f8:82:59:99:ef:05:
                    5c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141444

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.138.0/23
                IPv6:
                  2406:d340::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:55:5e:5e:51:d1:8a:75:24:83:48:56:29:b4:b4:c9:4a:
         e8:3f:66:2e:d8:c8:92:19:36:7c:8c:62:dd:8b:7e:9f:3a:4b:
         b8:af:62:f0:a7:d1:d7:c2:1f:81:9e:a0:e0:5a:f8:9a:84:77:
         f2:1d:3e:70:a7:f8:e3:f2:61:3f:3a:a1:46:c5:1d:b6:f9:85:
         7e:ea:0b:64:1f:18:d8:0d:ec:a3:33:21:a2:05:de:9c:2e:9b:
         fc:e4:9f:8a:06:e2:ee:ac:e5:8a:c4:a5:32:60:d9:6a:6d:f8:
         b4:8d:5a:cf:df:c1:87:9c:38:73:23:db:2e:3a:6a:b4:11:72:
         c2:b8:ab:25:73:d9:f4:df:58:aa:d3:43:7e:b9:3b:3e:5a:6c:
         cc:57:38:57:e2:7b:51:6d:83:3e:6a:5b:f0:f4:a9:23:eb:b5:
         64:a6:ea:22:e9:9c:ab:9e:d6:26:f9:9f:61:91:a2:3d:0a:70:
         a1:da:ac:5d:ac:17:4d:87:c7:91:84:bf:14:49:d1:97:a1:71:
         a4:c2:18:1f:a7:d1:b0:b2:a0:1d:cc:f1:b7:1a:1f:ea:a6:ce:
         59:cb:b5:f8:f4:8b:10:2a:f2:d1:de:fb:20:85:82:2d:41:1c:
         78:15:9a:f7:ac:61:f2:3b:7a:4f:bc:21:bc:b6:68:7f:84:f7:
         21:a3:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:21:48 2026 by rpki-client